Description
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | devhelp +1 | 0.9.2-2.4.6 | RHSA-2005:587 |
| RHEL 4 | firefox +1 | 1.0.6-1.4.1 | RHSA-2005:601, RHSA-2005:586 |
Advisories 9
- RHSA-2005:601 Red Hat Security Advisory: thunderbird security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:587 Red Hat Security Advisory: mozilla security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:586 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-779-2 mozilla-firefox - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-810-1 mozilla - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-781-1 mozilla-thunderbird - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-779-1 mozilla-firefox - several Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-8-2 mozilla-firefox - several vulnerabilities (update) Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-14-1 mozilla - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-810 vendor-advisory
- SUSE-SR:2005:018 vendor-advisory
- P-252 third-party-advisory government-resource
- FLSA:160202 vendor-advisory
- 19823 third-party-advisory
- RHSA-2005:587 vendor-advisory
- oval:org.mitre.oval:def:100005 vdb-entry signature
- 16059 third-party-advisory
- 16044 third-party-advisory
- ADV-2005-1075 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=298892
- RHSA-2005:601 vendor-advisory
- oval:org.mitre.oval:def:100004 vdb-entry signature
- oval:org.mitre.oval:def:729 vdb-entry signature
- http://www.networksecurity.fi/advisories/netscape-multiple-issues.html
- SUSE-SA:2005:045 vendor-advisory
- http://www.mozilla.org/security/announce/mfsa2005-55.html
- 14242 vdb-entry
- oval:org.mitre.oval:def:100011 vdb-entry signature
- oval:org.mitre.oval:def:9777 vdb-entry signature
- RHSA-2005:586 vendor-advisory
- 16043 third-party-advisory
- SUSE-SA:2006:022 vendor-advisory
- oval:org.mitre.oval:def:1258 vdb-entry signature